Genesis Toys My Friend Cayla
A maintainer confirmed the finding, or it is tied to a published CVE or writeup.
Internet-connected doll with an open Bluetooth microphone. Banned in Germany in 2017 as a concealed surveillance device; subject of complaints in the US and Norway.
Identity
- Brand
- Genesis Toys
- Model
- My Friend Cayla
- Made in
- CN (metadata, not a finding)
- Reports
- 1 total · 1 verified
Identifiers
| bt_name | Cayla |
| model_number | MYFRIENDCAYLA |
Check yours
Own one? Run the Trust Check and your report either corroborates or contradicts what's here. Both are useful.
claude mcp add --transport http isitspying https://mcp.isitspying.com/mcp
Then ask: “Run a Trust Check on my Genesis Toys My Friend Cayla.” Or file a report with photos.
Findings
| Finding | Max severity | Reports | Verified |
|---|---|---|---|
| Always-on microphone | critical | 1 | 1 |
| Exfiltrates user data | high | 1 | 1 |
Published sources
- Bundesnetzagentur removes children's doll 'Cayla' from the market · Bundesnetzagentur · 2017-02-17
- #ToyFail: Forbrukerrådet analysis of connected toys · Norwegian Consumer Council · 2016-12-06
Reports · 1
- Malicious verified Unauthenticated Bluetooth microphone and speaker: anyone in range can listen and talk through the doll; voice data sent to a third-party speech vendor
teardown · via api · by isitspying maintainers maintainer · 4h ago
Responses & disputes · right of reply
None yet.
Post a vendor response, dispute, or corroboration
Sign in to post.
Takedown or legal: takedown@isitspying.com. See how we handle disputes.
Embed the status
<a href="https://isitspying.com/p/genesis-toys-my-friend-cayla"><img src="https://isitspying.com/badge/genesis-toys-my-friend-cayla.svg"></a>
JSON: /api/products/genesis-toys-my-friend-cayla · or request this page with Accept: application/json.